# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for ML / AI or Security, Tagged `codex`: 6 items.

> - ML / AI: Model training, evaluation and LLM application development.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [Ruflo](https://hebbmind.com/de/cli/ruflo.md): [CLI] Multi-agent orchestration framework formerly called Claude Flow: ruflo init gives Claude Code nearly 100 specialized subagents, swarm coordination, cross-session vector memory and hooks; add --codex to configure Codex instead. Also works as a standalone MCP server or plugin marketplace.
- [career-ops](https://hebbmind.com/de/plugin/career-ops.md): [Plugin] Job search system that runs in your local AI coding CLI: scans job portals, scores roles with a structured A-H evaluation and a 1-5 rating, flags fake listings, tailors ATS resumes and cover letters, and tracks applications. Never submits for you. Needs Node.js.
- [ARIS (Auto-claude-code-research-in-sleep)](https://hebbmind.com/de/skill/auto-claude-code-research-in-sleep.md): [Skill] Lets Claude Code push ML research forward unattended: literature review, topic selection, experiment deployment, cross-model review loops and paper writing through rebuttal, in 80+ skills. Codex acts as the independent reviewer by default; other model pairings work too.
- [Codex Security](https://hebbmind.com/de/cli/codex-security.md): [CLI] OpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key.
- [Codex Security](https://hebbmind.com/de/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.
- [OpenAI Developers](https://hebbmind.com/de/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.